General
- Target 4e1cbb956eb622d61850f31954969c7a.exe
- Size 1.3MB
- Sample230706-gla5aaha32
- SHA256 230babb0130d12efe2800428967468359838667b901f8e86a240cb91cdf2af9b
- MD5 4e1cbb956eb622d61850f31954969c7a
- SHA1 69b007b44a94de6c827d679dcf60ec9d02a7590a
- SHA512 723f205e1d5c2499ee47a3119c448d3487b3853152b857de0c2a74310897c9ccbe19788fffc3b85328ff1cf215ea5eea92453802f2c66ebf9cf08a0ce55e9e85
- SSDEEP 24576:p7TMIlfhO99k5sKVQM2CkM+nOmUJ4Xtm+p0W1GVZ6:p7bOnkBRtTTmUJ4Xtmy0W1GVZ6
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4e1cbb956eb622d61850f31954969c7a.exe
Resource
win7-20230703-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
furod
C2
-
77.91.68.70:19073
Attributes
-
auth_value
d2386245fe11799b28b4521492a5879d
Targets
-
- Target 4e1cbb956eb622d61850f31954969c7a.exe
- Size 1.3MB
- SHA256 230babb0130d12efe2800428967468359838667b901f8e86a240cb91cdf2af9b
- MD5 4e1cbb956eb622d61850f31954969c7a
- SHA1 69b007b44a94de6c827d679dcf60ec9d02a7590a
- SHA512 723f205e1d5c2499ee47a3119c448d3487b3853152b857de0c2a74310897c9ccbe19788fffc3b85328ff1cf215ea5eea92453802f2c66ebf9cf08a0ce55e9e85
- SSDEEP 24576:p7TMIlfhO99k5sKVQM2CkM+nOmUJ4Xtm+p0W1GVZ6:p7bOnkBRtTTmUJ4Xtmy0W1GVZ6
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.